CVE-2022-33888

CVSS 7.8 HIGHEPSS 0.4%CWE-787

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

03 oct 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

n/a · utodesk® AutoCAD®, Advance Steel and Civil 3D®

Referencias

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020